PCAP Sentry is a beginner-friendly educational tool for learning to identify malware network traffic patterns. It analyzes network packet captures (.pcap / .pcapng) and teaches you how to recognize suspicious activity with clear explanations and hands-on practice.
Features:
- Beginner-focused explanations for understanding suspicious network traffic
- Risk scoring (0-100) to learn which patterns indicate malicious behavior
- Behavioral detection for beaconing, DNS tunneling, port scanning, data exfiltration
- Real-world threat intelligence integration (OTX, URLhaus, AbuseIPDB)
- AI-powered guidance with local LLM chat support
- Credential extraction learning from unencrypted protocols
- C2 pattern detection and Wireshark filter generation
- Trainable knowledge base for building malware signature libraries
- Works offline with local models and threat databases
Maelezo ya mchapishaji (Kiingereza)
PCAP Sentry ni nini?
Programu PCAP Sentry inachapishwa na industrial-dave. Ni programu ya chanzo huria ya Windows iliyo katika kundi la “Zana za mtandao”.
Usakinishaji na mahitaji
Mchapishaji hutoa visakinishi vya EXE (Inno Setup) kwa Windows ya 64-bit. Usakinishaji unaomba haki za msimamizi. Usakinishaji kimya unawezekana kwa swichi zilizoandikwa za kisakinishi.
Faida / Hasara
Faida
- Chanzo huria: mtu yeyote anaweza kukagua na kujenga msimbo
- Usakinishaji kimya umeelezwa
Hasara
- Hakuna toleo asili la ARM64
- Usakinishaji unahitaji haki za msimamizi
Kwa ufupi: PCAP Sentry ni zana ya chanzo huria ya kundi la “Zana za mtandao” kwa kompyuta za 64-bit. Wasimamizi wa mifumo wanaweza kuisambaza bila maswali.
Je, ni salama kupakua PCAP Sentry?
- Faili inatolewa na github.com, kikoa cha mchapishaji mwenyewe
- Kiungo cha kupakua kinatumia HTTPS
- Hashi ya SHA256 imechapishwa, hivyo unaweza kuthibitisha faili:
BFAF4D6C7655B477D0A8D7755DFD1DA998A4E5233E2F79949911CF26EEC2CD84· Fungua ripoti ya VirusTotal ya hashi hii - Kiungo bado hakijakaguliwa
- Msimbo chanzo uko wazi kwa umma
- ExeAtlas haihifadhi, haifungi wala haibadilishi visakinishi
Mwongozo unaohusiana: Jinsi ya kukagua hashi ya SHA256 ya faili kwenye Windows
Matoleo ya karibuni
Toleo 1 ›| Toleo | Tarehe | Ukubwa | Faili |
|---|---|---|---|
| 2026.2.17.2Jipya zaidi | 17 Februari 2026 | — | 64-bit EXE (Inno Setup) |
Kusakinisha kwa mstari wa amri
Usakinishaji kimya ›winget install --id industrial-dave.PCAP-Sentry -ePCAP_Sentry_Setup.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-Mwongozo unaohusiana: Jinsi ya kutumia winget: sakinisha na sasisha programu
Taarifa
- Mchapishaji
- industrial-dave
- Kategoria
- Zana za mtandao
- Leseni
- GPL-3.0
- Bei
- Bure
- Inahitaji
- Windows 11 / 10
- Usanifu
- 64-bit
- Kisakinishi
- EXE (Inno Setup)
- Toleo
- 2026.2.17.2
- Ilitolewa
- 17 Februari 2026
- Iliongezwa kwenye orodha
- 19 Februari 2026
- Matoleo yaliyoorodheshwa
- 1
- Tovuti
- github.com
- Kitambulisho cha winget
- industrial-dave.PCAP-Sentry
Ukadiriaji na maoni
Bado hakuna maoni. Kuwa wa kwanza kuikadiria.
Mbadala wa PCAP Sentry
Ona zote ›-
Chanzo huriaM6.6 ↓ -
Ya umilikiM1.1 ↓ -
Chanzo huriaelfu 897.9 ↓ -
Chanzo huriaM1.5 ↓ -
Chanzo huriaelfu 65.4 ↓ -
Chanzo huriaelfu 170.3 ↓ -
Chanzo huriaelfu 44.3 ↓ -
Ya umilikielfu 745.5 ↓
Maswali yanayoulizwa mara kwa mara
Je, PCAP Sentry ni bure?
Ndiyo. PCAP Sentry ni programu ya chanzo huria chini ya leseni ya GPL-3.0.
Je, ni salama kupakua PCAP Sentry?
Faili inapakuliwa kutoka github.com, ambayo ni ya mchapishaji mwenyewe; ExeAtlas haihifadhi wala haibadilishi faili. Linganisha hashi yake ya SHA256 na ile iliyoonyeshwa hapa, au fungua ripoti ya VirusTotal ya hashi hiyo.
Jinsi ya kusakinisha PCAP Sentry kwa winget?
Fungua PowerShell au Windows Terminal na uendeshe amri ya winget iliyoonyeshwa kwenye ukurasa huu. winget hupakua kisakinishi rasmi na kukagua hashi yake ya SHA256 kabla ya kukiendesha.
Je, PCAP Sentry inaweza kusakinishwa kimya?
Ndiyo. Ukurasa wa usakinishaji kimya unaonyesha amri kamili kwa kila kisakinishi.
Je, PCAP Sentry inafanya kazi kwenye ARM (Windows on Arm)?
Hakuna toleo la ARM64; Windows 11 on Arm inaweza kuendesha toleo la 64-bit kupitia uigaji (emulation).
Ni programu gani mbadala wa PCAP Sentry?
Wireshark, ZeroTier One, Nmap, iPerf3 na Yggdrasil Network. Ukurasa wa mbadala unazilinganisha.
